$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2BB383B12785FFDBA9DBD68D601BD3BA93B2595.cer File: C2BB383B12785FFDBA9DBD68D601BD3BA93B2595.cer (raw, json) Hash identifier: QNTjeyniRg+Q+PQ9USjEEzXwg19KXBhwPnvpgZRcOYQ= Subject key identifier: C2:BB:38:3B:12:78:5F:FD:BA:9D:BD:68:D6:01:BD:3B:A9:3B:25:95 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 130567A7F7E035DB35DF304DFF3D8F44D0249F6F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/83DB4CAEA55DA087AA6E13EFE013BD42794D930D0944C9BD49BFECF50D6D49F1/0/C2BB383B12785FFDBA9DBD68D601BD3BA93B2595.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/83DB4CAEA55DA087AA6E13EFE013BD42794D930D0944C9BD49BFECF50D6D49F1/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 01:54:16 +0000 Certificate not after: Wed 27 Jan 2027 01:59:16 +0000 Subordinate resources: AS: 272946 IP: 2803:4990::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:05:67:a7:f7:e0:35:db:35:df:30:4d:ff:3d:8f:44:d0:24:9f:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 01:54:16 2026 GMT Not After : Jan 27 01:59:16 2027 GMT Subject: CN=C2BB383B12785FFDBA9DBD68D601BD3BA93B2595 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:1d:23:a5:8e:5e:0e:53:b6:3c:df:54:89:5c: df:80:2c:e8:2b:71:e4:d2:5a:23:ff:14:00:aa:ff: 2c:9c:60:af:fa:c8:08:48:ce:4d:ef:d9:76:db:c5: f3:5a:c2:63:4d:f1:8e:68:ec:26:17:7a:1f:b0:22: c2:48:e4:4b:ac:8b:c6:e1:c4:dc:b9:0e:bb:a1:16: c7:b8:5c:70:5d:50:e2:4e:3b:19:a3:52:00:c5:12: f4:ff:8e:a9:e8:3f:9d:9b:e7:3f:fa:4a:e1:39:65: d7:e1:35:34:c0:21:63:0a:dc:08:42:30:a9:93:d1: 2d:6c:18:42:63:26:7c:c3:17:1d:96:07:55:85:98: d8:a1:b2:c1:ce:ed:b6:1a:c2:91:96:02:8a:03:1d: 35:98:59:fa:8b:47:47:05:66:3b:15:94:8a:cf:7e: 1e:4c:74:01:f4:63:34:74:8c:1c:da:a4:a0:1c:c1: 68:1d:5e:92:ec:af:20:a8:72:b5:8d:01:c3:c7:7c: 75:91:f5:0d:b4:7c:42:b9:00:71:87:4b:9f:0e:59: 49:b4:69:f3:58:8c:79:65:a5:75:b6:e7:02:f2:41: 92:c2:af:26:b9:1d:c4:1a:1e:02:42:db:fd:81:f9: 95:02:be:cb:c4:3f:22:82:6e:a4:ff:1b:f2:a4:9d: c2:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C2:BB:38:3B:12:78:5F:FD:BA:9D:BD:68:D6:01:BD:3B:A9:3B:25:95 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/83DB4CAEA55DA087AA6E13EFE013BD42794D930D0944C9BD49BFECF50D6D49F1/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/83DB4CAEA55DA087AA6E13EFE013BD42794D930D0944C9BD49BFECF50D6D49F1/0/C2BB383B12785FFDBA9DBD68D601BD3BA93B2595.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:4990::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272946 Signature Algorithm: sha256WithRSAEncryption 2d:a2:e6:91:f8:3d:a7:f9:c9:16:60:1a:52:75:86:4a:fd:14: 2e:61:8d:49:81:28:65:ee:e0:93:76:af:f6:a7:b7:b6:64:a7: 63:a5:d4:1e:0f:eb:5c:8f:e1:23:4a:27:fd:00:ae:fc:06:46: be:02:77:5d:0e:19:57:ee:6b:95:0e:9c:29:76:20:c7:e7:e0: 7f:b5:08:58:af:f2:d6:07:c3:63:1e:ab:33:78:2a:06:56:6b: db:29:ef:11:08:34:7c:59:0b:b8:d2:98:08:77:f8:d9:60:4b: 8b:d6:fa:21:27:4b:92:8a:36:48:c7:32:8f:dc:fc:b2:9f:9c: b6:cd:c7:a2:0b:d0:94:80:f5:9a:c8:7f:7a:85:11:4c:ee:47: fa:c0:4a:4a:d3:5e:f4:3f:65:b1:86:92:91:bf:11:2a:25:c6: 74:c2:79:95:5d:5c:32:92:e9:5f:a6:4c:de:6c:c7:c8:e1:b0: 36:0a:a1:5c:ba:bb:5f:05:b2:9d:dc:78:dc:35:1f:be:76:c7: a2:a3:05:25:6c:0a:fe:22:ed:8c:11:c7:34:93:89:18:19:31: 2a:e8:0c:48:00:3f:4f:db:87:5d:aa:30:8a:ee:44:66:f0:b3: 1a:cc:d4:98:41:32:06:f5:78:a1:1e:f6:2a:20:61:aa:18:43: 56:0d:9f:71 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUEwVnp/fgNds13zBN/z2PRNAkn28wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgwMTU0MTZaFw0yNzAxMjcwMTU5MTZaMDMxMTAvBgNV BAMTKEMyQkIzODNCMTI3ODVGRkRCQTlEQkQ2OEQ2MDFCRDNCQTkzQjI1OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQHSOljl4OU7Y831SJXN+ALOgr ceTSWiP/FACq/yycYK/6yAhIzk3v2XbbxfNawmNN8Y5o7CYXeh+wIsJI5Eusi8bh xNy5DruhFse4XHBdUOJOOxmjUgDFEvT/jqnoP52b5z/6SuE5ZdfhNTTAIWMK3AhC MKmT0S1sGEJjJnzDFx2WB1WFmNihssHO7bYawpGWAooDHTWYWfqLR0cFZjsVlIrP fh5MdAH0YzR0jBzapKAcwWgdXpLsryCocrWNAcPHfHWR9Q20fEK5AHGHS58OWUm0 afNYjHllpXW25wLyQZLCrya5HcQaHgJC2/2B+ZUCvsvEPyKCbqT/G/KkncJfAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTCuzg7Enhf/bqd vWjWAb07qTsllTAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvODNEQjRDQUVBNTVEQTA4N0FBNkUxM0VG RTAxM0JENDI3OTREOTMwRDA5NDRDOUJENDlCRkVDRjUwRDZENDlGMS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy84M0RCNENBRUE1NURBMDg3QUE2RTEzRUZFMDEzQkQ0Mjc5NEQ5MzBEMDk0 NEM5QkQ0OUJGRUNGNTBENkQ0OUYxLzAvQzJCQjM4M0IxMjc4NUZGREJBOURCRDY4 RDYwMUJEM0JBOTNCMjU5NS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKANJkDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEKjIwDQYJKoZIhvcNAQELBQADggEBAC2i5pH4 Paf5yRZgGlJ1hkr9FC5hjUmBKGXu4JN2r/ant7Zkp2Ol1B4P61yP4SNKJ/0ArvwG Rr4Cd10OGVfua5UOnCl2IMfn4H+1CFiv8tYHw2MeqzN4KgZWa9sp7xEINHxZC7jS mAh3+NlgS4vW+iEnS5KKNkjHMo/c/LKfnLbNx6IL0JSA9ZrIf3qFEUzuR/rASkrT XvQ/ZbGGkpG/ESolxnTCeZVdXDKS6V+mTN5sx8jhsDYKoVy6u18Fsp3ceNw1H752 x6KjBSVsCv4i7YwRxzSTiRgZMSroDEgAP0/bh12qMIruRGbwsxrM1JhBMgb1eKEe 9iogYaoYQ1YNn3E= -----END CERTIFICATE-----Generated at Mon Mar 2 14:15:29 2026 by rpki-client